| ssh-host-config (180751) | ssh-host-config (189006) |
|---|---|
| 1#!/bin/bash 2# 3# ssh-host-config, Copyright 2000, 2001, 2002, 2003 Red Hat Inc. 4# 5# This file is part of the Cygwin port of OpenSSH. 6 7# ====================================================================== 8# Initialization --- 11 unchanged lines hidden (view full) --- 20SYSCONFDIR=/etc 21LOCALSTATEDIR=/var 22 23source ${CSIH_SCRIPT} 24 25port_number=22 26privsep_configured=no 27privsep_used=yes | 1#!/bin/bash 2# 3# ssh-host-config, Copyright 2000, 2001, 2002, 2003 Red Hat Inc. 4# 5# This file is part of the Cygwin port of OpenSSH. 6 7# ====================================================================== 8# Initialization --- 11 unchanged lines hidden (view full) --- 20SYSCONFDIR=/etc 21LOCALSTATEDIR=/var 22 23source ${CSIH_SCRIPT} 24 25port_number=22 26privsep_configured=no 27privsep_used=yes |
| 28cygwin_value="ntsec" | 28cygwin_value="" |
| 29password_value= 30 31# ====================================================================== 32# Routine: create_host_keys 33# ====================================================================== 34create_host_keys() { 35 if [ ! -f "${SYSCONFDIR}/ssh_host_key" ] 36 then 37 csih_inform "Generating ${SYSCONFDIR}/ssh_host_key" 38 ssh-keygen -t rsa1 -f ${SYSCONFDIR}/ssh_host_key -N '' > /dev/null 39 fi | 29password_value= 30 31# ====================================================================== 32# Routine: create_host_keys 33# ====================================================================== 34create_host_keys() { 35 if [ ! -f "${SYSCONFDIR}/ssh_host_key" ] 36 then 37 csih_inform "Generating ${SYSCONFDIR}/ssh_host_key" 38 ssh-keygen -t rsa1 -f ${SYSCONFDIR}/ssh_host_key -N '' > /dev/null 39 fi |
| 40 | 40 |
| 41 if [ ! -f "${SYSCONFDIR}/ssh_host_rsa_key" ] 42 then 43 csih_inform "Generating ${SYSCONFDIR}/ssh_host_rsa_key" 44 ssh-keygen -t rsa -f ${SYSCONFDIR}/ssh_host_rsa_key -N '' > /dev/null 45 fi | 41 if [ ! -f "${SYSCONFDIR}/ssh_host_rsa_key" ] 42 then 43 csih_inform "Generating ${SYSCONFDIR}/ssh_host_rsa_key" 44 ssh-keygen -t rsa -f ${SYSCONFDIR}/ssh_host_rsa_key -N '' > /dev/null 45 fi |
| 46 | 46 |
| 47 if [ ! -f "${SYSCONFDIR}/ssh_host_dsa_key" ] 48 then 49 csih_inform "Generating ${SYSCONFDIR}/ssh_host_dsa_key" 50 ssh-keygen -t dsa -f ${SYSCONFDIR}/ssh_host_dsa_key -N '' > /dev/null 51 fi 52} # --- End of create_host_keys --- # 53 54# ====================================================================== --- 15 unchanged lines hidden (view full) --- 70 _spaces=" #" 71 else 72 _win_etcdir="${WINDIR}" 73 _services="${_my_etcdir}/SERVICES" 74 # On 9x, 18 spaces (95 is very touchy), a space after the hash 75 _spaces=" # " 76 fi 77 _serv_tmp="${_my_etcdir}/srv.out.$$" | 47 if [ ! -f "${SYSCONFDIR}/ssh_host_dsa_key" ] 48 then 49 csih_inform "Generating ${SYSCONFDIR}/ssh_host_dsa_key" 50 ssh-keygen -t dsa -f ${SYSCONFDIR}/ssh_host_dsa_key -N '' > /dev/null 51 fi 52} # --- End of create_host_keys --- # 53 54# ====================================================================== --- 15 unchanged lines hidden (view full) --- 70 _spaces=" #" 71 else 72 _win_etcdir="${WINDIR}" 73 _services="${_my_etcdir}/SERVICES" 74 # On 9x, 18 spaces (95 is very touchy), a space after the hash 75 _spaces=" # " 76 fi 77 _serv_tmp="${_my_etcdir}/srv.out.$$" |
| 78 79 mount -t -f "${_win_etcdir}" "${_my_etcdir}" 80 | 78 79 mount -o text -f "${_win_etcdir}" "${_my_etcdir}" 80 |
| 81 # Depends on the above mount 82 _wservices=`cygpath -w "${_services}"` | 81 # Depends on the above mount 82 _wservices=`cygpath -w "${_services}"` |
| 83 | 83 |
| 84 # Remove sshd 22/port from services 85 if [ `grep -q 'sshd[ \t][ \t]*22' "${_services}"; echo $?` -eq 0 ] 86 then 87 grep -v 'sshd[ \t][ \t]*22' "${_services}" > "${_serv_tmp}" 88 if [ -f "${_serv_tmp}" ] 89 then 90 if mv "${_serv_tmp}" "${_services}" 91 then | 84 # Remove sshd 22/port from services 85 if [ `grep -q 'sshd[ \t][ \t]*22' "${_services}"; echo $?` -eq 0 ] 86 then 87 grep -v 'sshd[ \t][ \t]*22' "${_services}" > "${_serv_tmp}" 88 if [ -f "${_serv_tmp}" ] 89 then 90 if mv "${_serv_tmp}" "${_services}" 91 then |
| 92 csih_inform "Removing sshd from ${_wservices}" | 92 csih_inform "Removing sshd from ${_wservices}" |
| 93 else | 93 else |
| 94 csih_warning "Removing sshd from ${_wservices} failed!" | 94 csih_warning "Removing sshd from ${_wservices} failed!" |
| 95 fi 96 rm -f "${_serv_tmp}" 97 else 98 csih_warning "Removing sshd from ${_wservices} failed!" 99 fi 100 fi | 95 fi 96 rm -f "${_serv_tmp}" 97 else 98 csih_warning "Removing sshd from ${_wservices} failed!" 99 fi 100 fi |
| 101 | 101 |
| 102 # Add ssh 22/tcp and ssh 22/udp to services 103 if [ `grep -q 'ssh[ \t][ \t]*22' "${_services}"; echo $?` -ne 0 ] 104 then 105 if awk '{ if ( $2 ~ /^23\/tcp/ ) print "ssh 22/tcp'"${_spaces}"'SSH Remote Login Protocol\nssh 22/udp'"${_spaces}"'SSH Remote Login Protocol"; print $0; }' < "${_services}" > "${_serv_tmp}" 106 then 107 if mv "${_serv_tmp}" "${_services}" 108 then | 102 # Add ssh 22/tcp and ssh 22/udp to services 103 if [ `grep -q 'ssh[ \t][ \t]*22' "${_services}"; echo $?` -ne 0 ] 104 then 105 if awk '{ if ( $2 ~ /^23\/tcp/ ) print "ssh 22/tcp'"${_spaces}"'SSH Remote Login Protocol\nssh 22/udp'"${_spaces}"'SSH Remote Login Protocol"; print $0; }' < "${_services}" > "${_serv_tmp}" 106 then 107 if mv "${_serv_tmp}" "${_services}" 108 then |
| 109 csih_inform "Added ssh to ${_wservices}" | 109 csih_inform "Added ssh to ${_wservices}" |
| 110 else | 110 else |
| 111 csih_warning "Adding ssh to ${_wservices} failed!" | 111 csih_warning "Adding ssh to ${_wservices} failed!" |
| 112 fi 113 rm -f "${_serv_tmp}" 114 else 115 csih_warning "Adding ssh to ${_wservices} failed!" 116 fi 117 fi 118 umount "${_my_etcdir}" 119} # --- End of update_services_file --- # --- 9 unchanged lines hidden (view full) --- 129 then 130 if csih_is_nt 131 then 132 csih_inform "Privilege separation is set to yes by default since OpenSSH 3.3." 133 csih_inform "However, this requires a non-privileged account called 'sshd'." 134 csih_inform "For more info on privilege separation read /usr/share/doc/openssh/README.privsep." 135 if csih_request "Should privilege separation be used?" 136 then | 112 fi 113 rm -f "${_serv_tmp}" 114 else 115 csih_warning "Adding ssh to ${_wservices} failed!" 116 fi 117 fi 118 umount "${_my_etcdir}" 119} # --- End of update_services_file --- # --- 9 unchanged lines hidden (view full) --- 129 then 130 if csih_is_nt 131 then 132 csih_inform "Privilege separation is set to yes by default since OpenSSH 3.3." 133 csih_inform "However, this requires a non-privileged account called 'sshd'." 134 csih_inform "For more info on privilege separation read /usr/share/doc/openssh/README.privsep." 135 if csih_request "Should privilege separation be used?" 136 then |
| 137 privsep_used=yes 138 if ! csih_create_unprivileged_user sshd 139 then | 137 privsep_used=yes 138 if ! csih_create_unprivileged_user sshd 139 then |
| 140 csih_warning "Couldn't create user 'sshd'!" | 140 csih_warning "Couldn't create user 'sshd'!" |
| 141 csih_warning "Privilege separation set to 'no' again!" 142 csih_warning "Check your ${SYSCONFDIR}/sshd_config file!" | 141 csih_warning "Privilege separation set to 'no' again!" 142 csih_warning "Check your ${SYSCONFDIR}/sshd_config file!" |
| 143 privsep_used=no | 143 privsep_used=no |
| 144 fi | 144 fi |
| 145 else | 145 else |
| 146 privsep_used=no | 146 privsep_used=no |
| 147 fi 148 else 149 # On 9x don't use privilege separation. Since security isn't 150 # available it just adds useless additional processes. 151 privsep_used=no 152 fi 153 fi | 147 fi 148 else 149 # On 9x don't use privilege separation. Since security isn't 150 # available it just adds useless additional processes. 151 privsep_used=no 152 fi 153 fi |
| 154 | 154 |
| 155 # Create default sshd_config from skeleton files in /etc/defaults/etc or 156 # modify to add the missing privsep configuration option 157 if cmp "${SYSCONFDIR}/sshd_config" "${SYSCONFDIR}/defaults/${SYSCONFDIR}/sshd_config" >/dev/null 2>&1 158 then 159 csih_inform "Updating ${SYSCONFDIR}/sshd_config file" 160 sshdconfig_tmp=${SYSCONFDIR}/sshd_config.$$ 161 sed -e "s/^#UsePrivilegeSeparation yes/UsePrivilegeSeparation ${privsep_used}/ 162 s/^#Port 22/Port ${port_number}/ 163 s/^#StrictModes yes/StrictModes no/" \ | 155 # Create default sshd_config from skeleton files in /etc/defaults/etc or 156 # modify to add the missing privsep configuration option 157 if cmp "${SYSCONFDIR}/sshd_config" "${SYSCONFDIR}/defaults/${SYSCONFDIR}/sshd_config" >/dev/null 2>&1 158 then 159 csih_inform "Updating ${SYSCONFDIR}/sshd_config file" 160 sshdconfig_tmp=${SYSCONFDIR}/sshd_config.$$ 161 sed -e "s/^#UsePrivilegeSeparation yes/UsePrivilegeSeparation ${privsep_used}/ 162 s/^#Port 22/Port ${port_number}/ 163 s/^#StrictModes yes/StrictModes no/" \ |
| 164 < ${SYSCONFDIR}/sshd_config \ 165 > "${sshdconfig_tmp}" | 164 < ${SYSCONFDIR}/sshd_config \ 165 > "${sshdconfig_tmp}" |
| 166 mv "${sshdconfig_tmp}" ${SYSCONFDIR}/sshd_config 167 elif [ "${privsep_configured}" != "yes" ] 168 then 169 echo >> ${SYSCONFDIR}/sshd_config 170 echo "UsePrivilegeSeparation ${privsep_used}" >> ${SYSCONFDIR}/sshd_config 171 fi 172} # --- End of sshd_privsep --- # 173 --- 14 unchanged lines hidden (view full) --- 188 if [ -f "${_inetcnf}" ] 189 then 190 grep -q '^[ \t]*ssh' "${_inetcnf}" && _with_comment=0 191 192 # check for sshd OR ssh in top-level inetd.conf file, and remove 193 # will be replaced by a file in inetd.d/ 194 if [ `grep -q '^[# \t]*ssh' "${_inetcnf}"; echo $?` -eq 0 ] 195 then | 166 mv "${sshdconfig_tmp}" ${SYSCONFDIR}/sshd_config 167 elif [ "${privsep_configured}" != "yes" ] 168 then 169 echo >> ${SYSCONFDIR}/sshd_config 170 echo "UsePrivilegeSeparation ${privsep_used}" >> ${SYSCONFDIR}/sshd_config 171 fi 172} # --- End of sshd_privsep --- # 173 --- 14 unchanged lines hidden (view full) --- 188 if [ -f "${_inetcnf}" ] 189 then 190 grep -q '^[ \t]*ssh' "${_inetcnf}" && _with_comment=0 191 192 # check for sshd OR ssh in top-level inetd.conf file, and remove 193 # will be replaced by a file in inetd.d/ 194 if [ `grep -q '^[# \t]*ssh' "${_inetcnf}"; echo $?` -eq 0 ] 195 then |
| 196 grep -v '^[# \t]*ssh' "${_inetcnf}" >> "${_inetcnf_tmp}" 197 if [ -f "${_inetcnf_tmp}" ] 198 then 199 if mv "${_inetcnf_tmp}" "${_inetcnf}" 200 then | 196 grep -v '^[# \t]*ssh' "${_inetcnf}" >> "${_inetcnf_tmp}" 197 if [ -f "${_inetcnf_tmp}" ] 198 then 199 if mv "${_inetcnf_tmp}" "${_inetcnf}" 200 then |
| 201 csih_inform "Removed ssh[d] from ${_inetcnf}" | 201 csih_inform "Removed ssh[d] from ${_inetcnf}" |
| 202 else | 202 else |
| 203 csih_warning "Removing ssh[d] from ${_inetcnf} failed!" | 203 csih_warning "Removing ssh[d] from ${_inetcnf} failed!" |
| 204 fi 205 rm -f "${_inetcnf_tmp}" 206 else 207 csih_warning "Removing ssh[d] from ${_inetcnf} failed!" 208 fi | 204 fi 205 rm -f "${_inetcnf_tmp}" 206 else 207 csih_warning "Removing ssh[d] from ${_inetcnf} failed!" 208 fi |
| 209 fi 210 fi 211 212 csih_install_config "${_sshd_inetd_conf}" "${SYSCONFDIR}/defaults" 213 if cmp "${SYSCONFDIR}/defaults${_sshd_inetd_conf}" "${_sshd_inetd_conf}" >/dev/null 2>&1 214 then 215 if [ "${_with_comment}" -eq 0 ] 216 then | 209 fi 210 fi 211 212 csih_install_config "${_sshd_inetd_conf}" "${SYSCONFDIR}/defaults" 213 if cmp "${SYSCONFDIR}/defaults${_sshd_inetd_conf}" "${_sshd_inetd_conf}" >/dev/null 2>&1 214 then 215 if [ "${_with_comment}" -eq 0 ] 216 then |
| 217 sed -e 's/@COMMENT@[ \t]*//' < "${_sshd_inetd_conf}" > "${_sshd_inetd_conf_tmp}" | 217 sed -e 's/@COMMENT@[ \t]*//' < "${_sshd_inetd_conf}" > "${_sshd_inetd_conf_tmp}" |
| 218 else | 218 else |
| 219 sed -e 's/@COMMENT@[ \t]*/# /' < "${_sshd_inetd_conf}" > "${_sshd_inetd_conf_tmp}" | 219 sed -e 's/@COMMENT@[ \t]*/# /' < "${_sshd_inetd_conf}" > "${_sshd_inetd_conf_tmp}" |
| 220 fi 221 mv "${_sshd_inetd_conf_tmp}" "${_sshd_inetd_conf}" 222 csih_inform "Updated ${_sshd_inetd_conf}" | 220 fi 221 mv "${_sshd_inetd_conf_tmp}" "${_sshd_inetd_conf}" 222 csih_inform "Updated ${_sshd_inetd_conf}" |
| 223 fi | 223 fi |
| 224 225 elif [ -f "${_inetcnf}" ] 226 then 227 grep -q '^[ \t]*sshd' "${_inetcnf}" && _with_comment=0 228 229 # check for sshd in top-level inetd.conf file, and remove 230 # will be replaced by a file in inetd.d/ 231 if [ `grep -q '^[# \t]*sshd' "${_inetcnf}"; echo $?` -eq 0 ] 232 then 233 grep -v '^[# \t]*sshd' "${_inetcnf}" >> "${_inetcnf_tmp}" 234 if [ -f "${_inetcnf_tmp}" ] 235 then | 224 225 elif [ -f "${_inetcnf}" ] 226 then 227 grep -q '^[ \t]*sshd' "${_inetcnf}" && _with_comment=0 228 229 # check for sshd in top-level inetd.conf file, and remove 230 # will be replaced by a file in inetd.d/ 231 if [ `grep -q '^[# \t]*sshd' "${_inetcnf}"; echo $?` -eq 0 ] 232 then 233 grep -v '^[# \t]*sshd' "${_inetcnf}" >> "${_inetcnf_tmp}" 234 if [ -f "${_inetcnf_tmp}" ] 235 then |
| 236 if mv "${_inetcnf_tmp}" "${_inetcnf}" 237 then | 236 if mv "${_inetcnf_tmp}" "${_inetcnf}" 237 then |
| 238 csih_inform "Removed sshd from ${_inetcnf}" | 238 csih_inform "Removed sshd from ${_inetcnf}" |
| 239 else | 239 else |
| 240 csih_warning "Removing sshd from ${_inetcnf} failed!" | 240 csih_warning "Removing sshd from ${_inetcnf} failed!" |
| 241 fi 242 rm -f "${_inetcnf_tmp}" | 241 fi 242 rm -f "${_inetcnf_tmp}" |
| 243 else | 243 else |
| 244 csih_warning "Removing sshd from ${_inetcnf} failed!" | 244 csih_warning "Removing sshd from ${_inetcnf} failed!" |
| 245 fi 246 fi | 245 fi 246 fi |
| 247 | 247 |
| 248 # Add ssh line to inetd.conf 249 if [ `grep -q '^[# \t]*ssh' "${_inetcnf}"; echo $?` -ne 0 ] 250 then 251 if [ "${_with_comment}" -eq 0 ] 252 then | 248 # Add ssh line to inetd.conf 249 if [ `grep -q '^[# \t]*ssh' "${_inetcnf}"; echo $?` -ne 0 ] 250 then 251 if [ "${_with_comment}" -eq 0 ] 252 then |
| 253 echo 'ssh stream tcp nowait root /usr/sbin/sshd sshd -i' >> "${_inetcnf}" | 253 echo 'ssh stream tcp nowait root /usr/sbin/sshd sshd -i' >> "${_inetcnf}" |
| 254 else | 254 else |
| 255 echo '# ssh stream tcp nowait root /usr/sbin/sshd sshd -i' >> "${_inetcnf}" | 255 echo '# ssh stream tcp nowait root /usr/sbin/sshd sshd -i' >> "${_inetcnf}" |
| 256 fi 257 csih_inform "Added ssh to ${_inetcnf}" 258 fi 259 fi 260} # --- End of update_inetd_conf --- # 261 262# ====================================================================== 263# Routine: install_service --- 9 unchanged lines hidden (view full) --- 273 then 274 echo 275 echo 276 csih_warning "The following functions require administrator privileges!" 277 echo 278 echo -e "${_csih_QUERY_STR} Do you want to install sshd as a service?" 279 if csih_request "(Say \"no\" if it is already installed as a service)" 280 then | 256 fi 257 csih_inform "Added ssh to ${_inetcnf}" 258 fi 259 fi 260} # --- End of update_inetd_conf --- # 261 262# ====================================================================== 263# Routine: install_service --- 9 unchanged lines hidden (view full) --- 273 then 274 echo 275 echo 276 csih_warning "The following functions require administrator privileges!" 277 echo 278 echo -e "${_csih_QUERY_STR} Do you want to install sshd as a service?" 279 if csih_request "(Say \"no\" if it is already installed as a service)" 280 then |
| 281 csih_inform "Note that the CYGWIN variable must contain at least \"ntsec\"" 282 csih_inform "for sshd to be able to change user context without password." 283 csih_get_cygenv "${cygwin_value}" | 281 csih_get_cygenv "${cygwin_value}" |
| 284 | 282 |
| 285 if ( csih_is_nt2003 || [ "$csih_FORCE_PRIVILEGED_USER" = "yes" ] ) 286 then 287 csih_inform "On Windows Server 2003, Windows Vista, and above, the" 288 csih_inform "SYSTEM account cannot setuid to other users -- a capability" 289 csih_inform "sshd requires. You need to have or to create a privileged" 290 csih_inform "account. This script will help you do so." 291 echo 292 if ! csih_create_privileged_user "${password_value}" 293 then 294 csih_error_recoverable "There was a serious problem creating a privileged user." 295 csih_request "Do you want to proceed anyway?" || exit 1 296 fi 297 fi | 283 if ( csih_is_nt2003 || [ "$csih_FORCE_PRIVILEGED_USER" = "yes" ] ) 284 then 285 csih_inform "On Windows Server 2003, Windows Vista, and above, the" 286 csih_inform "SYSTEM account cannot setuid to other users -- a capability" 287 csih_inform "sshd requires. You need to have or to create a privileged" 288 csih_inform "account. This script will help you do so." 289 echo 290 if ! csih_create_privileged_user "${password_value}" 291 then 292 csih_error_recoverable "There was a serious problem creating a privileged user." 293 csih_request "Do you want to proceed anyway?" || exit 1 294 fi 295 fi |
| 298 | 296 |
| 299 # never returns empty if NT or above 300 run_service_as=$(csih_service_should_run_as) | 297 # never returns empty if NT or above 298 run_service_as=$(csih_service_should_run_as) |
| 301 | 299 |
| 302 if [ "${run_service_as}" = "${csih_PRIVILEGED_USERNAME}" ] 303 then 304 password="${csih_PRIVILEGED_PASSWORD}" 305 if [ -z "${password}" ] 306 then 307 csih_get_value "Please enter the password for user '${run_service_as}':" "-s" 308 password="${csih_value}" 309 fi 310 fi | 300 if [ "${run_service_as}" = "${csih_PRIVILEGED_USERNAME}" ] 301 then 302 password="${csih_PRIVILEGED_PASSWORD}" 303 if [ -z "${password}" ] 304 then 305 csih_get_value "Please enter the password for user '${run_service_as}':" "-s" 306 password="${csih_value}" 307 fi 308 fi |
| 311 | 309 |
| 312 # at this point, we either have $run_service_as = "system" and $password is empty, 313 # or $run_service_as is some privileged user and (hopefully) $password contains 314 # the correct password. So, from here out, we use '-z "${password}"' to discriminate 315 # the two cases. | 310 # at this point, we either have $run_service_as = "system" and $password is empty, 311 # or $run_service_as is some privileged user and (hopefully) $password contains 312 # the correct password. So, from here out, we use '-z "${password}"' to discriminate 313 # the two cases. |
| 316 | 314 |
| 317 csih_check_user "${run_service_as}" | 315 csih_check_user "${run_service_as}" |
| 318 | 316 |
| 319 if [ -z "${password}" ] 320 then 321 if cygrunsrv -I sshd -d "CYGWIN sshd" -p /usr/sbin/sshd -a "-D" -y tcpip \ 322 -e CYGWIN="${csih_cygenv}" 323 then 324 echo 325 csih_inform "The sshd service has been installed under the LocalSystem" 326 csih_inform "account (also known as SYSTEM). To start the service now, call" 327 csih_inform "\`net start sshd' or \`cygrunsrv -S sshd'. Otherwise, it" 328 csih_inform "will start automatically after the next reboot." 329 fi 330 else 331 if cygrunsrv -I sshd -d "CYGWIN sshd" -p /usr/sbin/sshd -a "-D" -y tcpip \ 332 -e CYGWIN="${csih_cygenv}" -u "${run_service_as}" -w "${password}" 333 then | 317 if [ -n "${csih_cygenv}" ] 318 then 319 cygwin_env="-e CYGWIN=\"${csih_cygenv}\"" 320 fi 321 if [ -z "${password}" ] 322 then 323 if eval cygrunsrv -I sshd -d \"CYGWIN sshd\" -p /usr/sbin/sshd \ 324 -a "-D" -y tcpip ${cygwin_env} 325 then |
| 334 echo | 326 echo |
| 327 csih_inform "The sshd service has been installed under the LocalSystem" 328 csih_inform "account (also known as SYSTEM). To start the service now, call" 329 csih_inform "\`net start sshd' or \`cygrunsrv -S sshd'. Otherwise, it" 330 csih_inform "will start automatically after the next reboot." 331 fi 332 else 333 if eval cygrunsrv -I sshd -d \"CYGWIN sshd\" -p /usr/sbin/sshd \ 334 -a "-D" -y tcpip ${cygwin_env} \ 335 -u "${run_service_as}" -w "${password}" 336 then 337 echo |
|
| 335 csih_inform "The sshd service has been installed under the '${run_service_as}'" 336 csih_inform "account. To start the service now, call \`net start sshd' or" | 338 csih_inform "The sshd service has been installed under the '${run_service_as}'" 339 csih_inform "account. To start the service now, call \`net start sshd' or" |
| 337 csih_inform "\`cygrunsrv -S sshd'. Otherwise, it will start automatically" 338 csih_inform "after the next reboot." 339 fi 340 fi | 340 csih_inform "\`cygrunsrv -S sshd'. Otherwise, it will start automatically" 341 csih_inform "after the next reboot." 342 fi 343 fi |
| 341 | 344 |
| 342 # now, if successfully installed, set ownership of the affected files 343 if cygrunsrv -Q sshd >/dev/null 2>&1 344 then 345 chown "${run_service_as}" ${SYSCONFDIR}/ssh* 346 chown "${run_service_as}".544 ${LOCALSTATEDIR}/empty 347 chown "${run_service_as}".544 ${LOCALSTATEDIR}/log/lastlog 348 if [ -f ${LOCALSTATEDIR}/log/sshd.log ] 349 then | 345 # now, if successfully installed, set ownership of the affected files 346 if cygrunsrv -Q sshd >/dev/null 2>&1 347 then 348 chown "${run_service_as}" ${SYSCONFDIR}/ssh* 349 chown "${run_service_as}".544 ${LOCALSTATEDIR}/empty 350 chown "${run_service_as}".544 ${LOCALSTATEDIR}/log/lastlog 351 if [ -f ${LOCALSTATEDIR}/log/sshd.log ] 352 then |
| 350 chown "${run_service_as}".544 ${LOCALSTATEDIR}/log/sshd.log | 353 chown "${run_service_as}".544 ${LOCALSTATEDIR}/log/sshd.log |
| 351 fi 352 else 353 csih_warning "Something went wrong installing the sshd service." 354 fi | 354 fi 355 else 356 csih_warning "Something went wrong installing the sshd service." 357 fi |
| 355 fi # user allowed us to install as service 356 fi # service not yet installed 357 fi # csih_is_nt 358} # --- End of install_service --- # 359 360# ====================================================================== 361# Main Entry Point 362# ====================================================================== --- 88 unchanged lines hidden (view full) --- 451done 452 453# ====================================================================== 454# Action! 455# ====================================================================== 456 457# Check for running ssh/sshd processes first. Refuse to do anything while 458# some ssh processes are still running | 358 fi # user allowed us to install as service 359 fi # service not yet installed 360 fi # csih_is_nt 361} # --- End of install_service --- # 362 363# ====================================================================== 364# Main Entry Point 365# ====================================================================== --- 88 unchanged lines hidden (view full) --- 454done 455 456# ====================================================================== 457# Action! 458# ====================================================================== 459 460# Check for running ssh/sshd processes first. Refuse to do anything while 461# some ssh processes are still running |
| 459if ps -ef | grep -v grep | grep -q ssh | 462if ps -ef | grep -q '/sshd\?$' |
| 460then 461 echo 462 csih_error "There are still ssh processes running. Please shut them down first." 463fi 464 465# Check for ${SYSCONFDIR} directory 466csih_make_dir "${SYSCONFDIR}" "Cannot create global configuration files." 467chmod 775 "${SYSCONFDIR}" 468setfacl -m u:system:rwx "${SYSCONFDIR}" 469 470# Check for /var/log directory 471csih_make_dir "${LOCALSTATEDIR}/log" "Cannot create log directory." 472chmod 775 "${LOCALSTATEDIR}/log" 473setfacl -m u:system:rwx "${LOCALSTATEDIR}/log" 474 475# Create /var/log/lastlog if not already exists 476if [ -e ${LOCALSTATEDIR}/log/lastlog -a ! -f ${LOCALSTATEDIR}/log/lastlog ] 477then | 463then 464 echo 465 csih_error "There are still ssh processes running. Please shut them down first." 466fi 467 468# Check for ${SYSCONFDIR} directory 469csih_make_dir "${SYSCONFDIR}" "Cannot create global configuration files." 470chmod 775 "${SYSCONFDIR}" 471setfacl -m u:system:rwx "${SYSCONFDIR}" 472 473# Check for /var/log directory 474csih_make_dir "${LOCALSTATEDIR}/log" "Cannot create log directory." 475chmod 775 "${LOCALSTATEDIR}/log" 476setfacl -m u:system:rwx "${LOCALSTATEDIR}/log" 477 478# Create /var/log/lastlog if not already exists 479if [ -e ${LOCALSTATEDIR}/log/lastlog -a ! -f ${LOCALSTATEDIR}/log/lastlog ] 480then |
| 478 echo | 481 echo |
| 479 csih_error_multi "${LOCALSTATEDIR}/log/lastlog exists, but is not a file." \ | 482 csih_error_multi "${LOCALSTATEDIR}/log/lastlog exists, but is not a file." \ |
| 480 "Cannot create ssh host configuration." | 483 "Cannot create ssh host configuration." |
| 481fi 482if [ ! -e ${LOCALSTATEDIR}/log/lastlog ] 483then 484 cat /dev/null > ${LOCALSTATEDIR}/log/lastlog 485 chmod 644 ${LOCALSTATEDIR}/log/lastlog 486fi 487 488# Create /var/empty file used as chroot jail for privilege separation --- 26 unchanged lines hidden (view full) --- 515if ! cmp "${SYSCONFDIR}/sshd_config" "${SYSCONFDIR}/defaults/${SYSCONFDIR}/sshd_config" >/dev/null 2>&1 516then 517 grep -q UsePrivilegeSeparation ${SYSCONFDIR}/sshd_config && privsep_configured=yes 518fi 519sshd_privsep 520 521 522 | 484fi 485if [ ! -e ${LOCALSTATEDIR}/log/lastlog ] 486then 487 cat /dev/null > ${LOCALSTATEDIR}/log/lastlog 488 chmod 644 ${LOCALSTATEDIR}/log/lastlog 489fi 490 491# Create /var/empty file used as chroot jail for privilege separation --- 26 unchanged lines hidden (view full) --- 518if ! cmp "${SYSCONFDIR}/sshd_config" "${SYSCONFDIR}/defaults/${SYSCONFDIR}/sshd_config" >/dev/null 2>&1 519then 520 grep -q UsePrivilegeSeparation ${SYSCONFDIR}/sshd_config && privsep_configured=yes 521fi 522sshd_privsep 523 524 525 |
| 523update_services_file | 526update_services_file |
| 524update_inetd_conf 525install_service 526 527echo 528csih_inform "Host configuration finished. Have fun!" 529 | 527update_inetd_conf 528install_service 529 530echo 531csih_inform "Host configuration finished. Have fun!" 532 |